SMART Technologies TeamWorks Technical Reference
- Type
- Technical Reference
SMART Technologies TeamWorks is a revolutionary video conferencing system that empowers teams to collaborate and share ideas as if they were in the same room. With TeamWorks, you can:
- Conduct real-time video conferences with up to 25 participants.
- Share your screen, presentations, and documents with other participants.
- Use the interactive whiteboard to brainstorm and collaborate on ideas.
- Record and playback meetings for later reference.
- Integrate with other business tools and applications.
SMART Technologies TeamWorks is a revolutionary video conferencing system that empowers teams to collaborate and share ideas as if they were in the same room. With TeamWorks, you can:
- Conduct real-time video conferences with up to 25 participants.
- Share your screen, presentations, and documents with other participants.
- Use the interactive whiteboard to brainstorm and collaborate on ideas.
- Record and playback meetings for later reference.
- Integrate with other business tools and applications.
Was this document helpful?
smarttech.com/docfeedback/171393
1 smarttech.com/kb/171393
Security white paper
SMART TeamWorks™
Using SMART TeamWorks™, team members in various locations can work together in a real-time
collaborative workspace as if they were in the same room. SMART TeamWorks provides video,
voice, collaborative whiteboarding, wireless presentation, and document editing in a multi-page
workspace.
Infrastructure
SMART TeamWorks Server uses a REST API provided by a back-end layer that is credential-
secured over TLS 1.2, the successor protocol to the now-deprecated SSL protocol.
Communication with the REST API and IIS services takes place over TLS (port 443) with 2048-bit
asymmetric encryption and 256-bit symmetric encryption. SMARTBoard® interactive displays with
SMART TeamWorks are authenticated on the servers using a four-step authentication process with
SASL. Inbound and outbound data from the back-end layer is encrypted and transmitted with
2048-bit asymmetric encryption and 256-bit symmetric encryption using certificates from third-
party credited authorities.
The back-end tier provides public services: REST API and IIS. Your organization can choose
different back-end options for its deployment–on-premises or cloud-based (Microsoft® Azure®)–to
provide a resilient, low latency and redundant back-end.
SECURITY WHITE PAPER
SMART TEAMWORKS
2 smarttech.com/kb/171393
MagoCast Media Services
WebRTC Server
REST WebService API
Windows Server 2016+
SMART TeamWorks™ Server Infrastructure
SQL Server
2014+
UbuntuServer 16+ LTS
Oce 365 /
On-Premises /
Hybrid
Exchange
World Wide Web
Local Area Network
HTTP/S
WSS
HTTP/S
RMS Sync Services
RMS Connector for
Exchange (exe)
Microsoft II S
Web Portal (website)
REST WebService API
End-User Web Pages
Meeting Server (website)
REST WebService API
WebSocket API
HTTP/S
Web Portal Web Portal
IT Administrators End users
HTTP/S
TCP 1433
Meeting Server
Web Portal
SMART TeamWorks
meeting room
NUC / OPS / Compute Card
HTTP/S
WSS
HTTP/S
Meeting Server, Web Portal
SMART TeamWorks meeting
room
NUC / OPS / Compute Card
Web Portal
End users
Meeting Server
SMART TeamWorks
Contributor apps
Meeting Server
SMART TeamWorks
Contributor apps
Although SMART TeamWorks Server supports HTTP connections (for internal lab and demo
environments only), SMART strongly recommends the use of encrypted HTTPS over TLS 1.2 by
default in a production environment.
SMART TeamWorks Server does not directly tunnel any service. Your organization can access only
those resources that pass through the dedicated API interface after passing a double level of
authentication.
SMART TeamWorks validates client inputs, verifying the presence of security tokens within the
HTTP headers and checking the content of the client calls.
SMART TeamWorks implements strong custom authentication based on double security tokens.
The first token is released at the first call and is mandatory for receiving the second token. The
latest token is verified at the beginning of each client call.
SMART TeamWorks limits the authentication attempts a client can make within a time unit. SMART
TeamWorks blocks potential attacker clients that exceed the limit.
SECURITY WHITE PAPER
SMART TEAMWORKS
3 smarttech.com/kb/171393
SMART TeamWorks Server security
Separation of duties and “Least Privilege” security principles
“Least Privilege” security gives users only the minimum privileges needed for completing their
daily tasks. To secure data and the system in general from potential damage, SMART TeamWorks
Server identifies a comprehensive hierarchy of users and separate duties. SMART TeamWorks
Server gives users separate IDs and only the permissions they require.
Role-based access control (RBAC)
SMART TeamWorks Server supports role-based access control (RBAC). Every meeting is managed
by an owner who can control user permissions.
Purging policy for end user data (stateless configuration)
You can schedule a daily wipe of stored user data in a secured NFTS partition connected to the
SMART TeamWorks Server architecture. End user data includes all meeting contents, IDs, PINs,
and recap files.
Network security and firewall considerations
SMART TeamWorks client software requires internet access through these ports:
l TCP 80
l TCP 443
l UDP 53
If your organization is using layer 7 filtering or a proxy with protocol filtering on these ports, allow
the following protocols:
l HTTP
l HTTPS
l DTLS
l DNS
l STUN
l TURN
l ICE
SECURITY WHITE PAPER
SMART TEAMWORKS
4 smarttech.com/kb/171393
Proxy support
SMART TeamWorks supports the following proxies:
l HTTP proxy
*
l SOCKS 5
*
l Proxy auto-configuration (PAC) file
*
l System proxy (Windows®)
Microsoft Azure deployment
Microsoft Azure data centers are geographically dispersed. The data centers comply with ISO/IEC
27001:2005, SOC 1, and SOC 2 and are CSA STAR certified.
Microsoft operates these data centers. Microsoft has decades of experience building enterprise
software and runs some of the largest online services in the world.
On-premises deployment
TIP
On-premises deployment of SMART TeamWorks Server requires Microsoft IIS, Microsoft SQL
Server®, and the NTFS file system.
SMART also recommends a layer 7 firewall to provide a high level of security and reduce exposure
to zero day exploits.
*
With or without authentication
SECURITY WHITE PAPER
SMART TEAMWORKS
5 smarttech.com/kb/171393
SMARTBoard interactive displays with
SMARTTeamWorks security
SMARTBoard interactive displays with SMARTTeamWorks are designed to be appliance-like,
ensuring a consistent “walk-up” user experience without sacrificing security.
Security and lockdown
To allow the use of SMARTBoard interactive displays with SMART TeamWorks in communal
spaces, such as meeting rooms, the custom operating system implements many of the security
and lock-down features available in the Windows 10 operating system:
l UEFI secure boot
l User mode code integrity (UMCI) with Device Guard
l Application restriction policies using AppLocker®
l BitLocker® drive encryption
l Trusted Platform Module (TPM)
l Windows Defender
l User Account Control (UAC) for access to the Settings app
The custom operating system also offers these features to provide additional security:
l The custom shell and Start menu limit access to only meeting-related functions.
l The custom File Explorer grants access to only files and folders managed and set by your
organization under My Documents, attached storage devices, or local-user mapped network
drives.
Kiosk mode
The SMARTTeamWorks user interface is designed specifically to support the large screens and
touch features of SMART Board interactive displays. It doesn’t use the same shell as Windows 10
Enterprise operating system. SMART has removed a number of tools, such as the Command
Prompt, Control Panel, and Registry Editor, to allow your organization to place SMARTBoard
interactive displays with SMARTTeamWorks in public without fear of tampering.
SMART TeamWorks is designed for use in communal spaces, such as meeting rooms. Unlike with
Windows computers, anyone can walk up and use a SMART Board interactive display with
SMARTTeamWorks without signing in.
A local, auto signed-in, low-privilege user is always signed in to SMARTTeamWorks.
SECURITY WHITE PAPER
SMART TEAMWORKS
6 smarttech.com/kb/171393
Saving and browsing files during a session
By default, users can access only a limited set of folders on SMART TeamWorks during a session:
l Meeting (secure cache replicated during a session between clients)
l Screenshots
l My Documents
When users end a session in SMART TeamWorks, files attached to the meeting or added to the
whiteboard session are deleted. If saving files is enabled by your organization, a user can save the
file to a USB drive, email it, or disconnect the session from SMART TeamWorks Server if joined
remotely.
Vigilant data safety
After each SMART TeamWorks session, data is wiped from the system to protect sensitive
information. The next team to use the SMARTBoard interactive display has a blank session to start
using.
Hard drive encryption
The SMART TeamWorks hard drive is encrypted by BitLocker. If someone removes the hard drive,
they must provide the BitLocker key to re-enable the hard drive.
Ultrasonic pairing
Ultrasonic pairing is an optional method for transferring session connection credentials between
the SMARTBoard interactive display and a contributor app on a mobile device. Configurable
through SMARTTeamWorks settings, it allows contributor apps to automatically join a session or to
transfer a session initiated in the app to the interactive display.
Ultrasonic pairing works by broadcasting the meeting credentials (URL, meeting ID, and PIN)
through an ultra-high frequency sound. It broadcasts in the 17.5 kHz to 20 kHz range.
For more information about ultrasonic pairing, see chirp.io/docs/data-over-sound-whitepaper.pdf.
smarttech.com/support
smarttech.com/contactsupport
© 2019SMARTTechnologiesULC. All rights reserved. SMARTBoard, SMARTTeamWorks, smarttech, the SMART logo, and all SMART taglines are trademarks or
registered trademarks of SMARTTechnologiesULC in the U.S. and/or other countries. Re Mago Meeting Server (RMS) is a registered trademark of Re Mago
Holding Ltd. in the U.S. and/or other countries. Microsoft, Azure, Windows, AppLocker, and BitLocker are either registered trademarks or trademarks of Microsoft
Corporation in the United States and/or other countries. All other third-party product and company names may be trademarks of their respective owners. Contents
are subject to change without notice. 04/2019.
-
1
-
2
-
3
-
4
-
5
-
6
SMART Technologies TeamWorks Technical Reference
- Type
- Technical Reference
SMART Technologies TeamWorks is a revolutionary video conferencing system that empowers teams to collaborate and share ideas as if they were in the same room. With TeamWorks, you can:
- Conduct real-time video conferences with up to 25 participants.
- Share your screen, presentations, and documents with other participants.
- Use the interactive whiteboard to brainstorm and collaborate on ideas.
- Record and playback meetings for later reference.
- Integrate with other business tools and applications.
Ask a question and I''ll find the answer in the document
Finding information in a document is now easier with AI
Related papers
-
SMART Technologies TeamWorks Technical Reference
-
-
-
-
-
SMART Technologies Board MX (V2) User guide
-
-
-
-
SMART Technologies Board 7000 and 7000 Pro User guide
Other documents
-
Novell TeamWorks 18 User guide
-
-
Alcatel-Lucent OmniTouch My Teamwork Installation guide
-
Wave 35-001049-8 Datasheet
-
Wiley 978-0-470-44931-8 Datasheet
-
-
-
-
Vex Challenge Ringmaster User manual
-
